Patent SG-11201810477P-A (SG)
Title: Tenant-aware distributed application authentication
Inventor: KARANGUTKAR MILAN
IPC: H04W12/06
Filed: 2017-06-05
Abstract: INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property :::` , 11111110111101110111111110101111100121111111111111111111111111111111110111111 Organization International Bureau (10) International Publication Number 03 (43) International Publication Date .......\"' WO 2017/214046 Al 14 December 2017 (14.12.2017) WIP0 I PCT (51) International Patent Classification: ALAG, Satnam; 5200 Illumina Way, San Diego, CA H04L 29/06 (2006.01) H04W 12/06 (2009.01) 92122 (US). GOOF 21/41 (2013.01) (74) Agent: MAURER, Gregory; Klarquist Sparkman, LLP, (21) International Application Number: One World Trade Center, Suite 1600, 121 SW Salmon PCT/US2017/035982 Street, Portland, OR 97204 (US). (22) International Filing Date: (81) Designated States (unless otherwise indicated, for every 05 June 2017 (05.06.2017) kind of national protection available): AE, AG, AL, AM, AO, AT, AU, AZ, BA, BB, BG, BH, BN, BR, BW, BY, BZ, (25) Filing Language: English CA, CH, CL, CN, CO, CR, CU, CZ, DE, DJ, DK, DM, DO, (26) Publication Language: English DZ, EC, EE, EG, ES, FI, GB, GD, GE, GH, GM, GT, HN, HR, HU, ID, IL, IN, IR, IS, JP, KE, KG, KH, KN, KP, KR, (30) Priority Data: KW, KZ, LA, LC, LK, LR, LS, LU, LY, MA, MD, ME, MG, 62/346,367 06 June 2016 (06.06.2016) US MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, OM, (71) Applicant: ILLUMINA, INC. [US/US]; 5200 Illumina PA, PE, PG, PH, PL, PT, QA, RO, RS, RU, RW, SA, SC, Way, San Diego, CA 92122 (US). SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, ZA, ZM, ZW. (72) Inventors: KARANGUTKAR, Milan; 5200 Illumina Way, San Diego, CA 92122 (US). PALANISAMY, Prab- (84) Designated States (unless otherwise indicated, for every hu; 5200 Illumina Way, San Diego, CA 92122 (US). kind of regional protection available): ARIPO (BW, GH, = (54) Title: TENANT-AWARE DISTRIBUTED APPLICATION AUTHENTICATION = APPLICATION HOSTING PLATFORM INSTANCE 1030A CHECK TOKEN ID PROVIDER META- DATA PLATFORM AUTHENTICATION 1005 AUTH. 1090 1044A SERVICE 1040A TOKENS 1070A 4a ... w = ,........ `,...- AUTH. CONFIG. = ..-- --.. = APP 1050A r....-----.1 .... USERS INFO. 1085A CLIENT 116.2 = = 1020 o f - , CLUSTER SERVICE = 1- z 0 1088A = m = TOKEN la o = CF SS ¢ > META- = TENANT 1010 'DU ,5,, PLATFORM AUTHENTICATION DATA 1044B = p,\.5 0. SERVICE 1040B = * a ,d \ 3 411 111..111. .......... = = AP 0R 10 p:0 (S \0..e. g 5 0) c o 0 o AUTH CONFIG INFO. CLUSTER SERVICE 10888 11 i f APPLICATION HOSTING PLATFORM INSTANCE 1030R 1000 FIG. 10 71- c ::: :) (57) : Flexible authentication technologies customized to particular tenants of a data center network can be implemented. 'V For example, an administrator can specify a primary authentication server and specify at which data centers different applications 1-1 are to be hosted for a given tenant. End users can be shielded from the complexities of implementing such configuration details. For ei ---- example, single sign-on authentication can be implemented, even when applications are configured to be hosted in different data centers. IN Enterprise tenants can thus control where applications are hosted and enforce data containment scenarios without encumbering users © with additional tasks. Collaboration and application-to-application authentication can be achieved. ei C [Continued on next page] WO 2017/214046 Al MIDEDIMOMOIDEIRMEM001101011101HROMEMON GM, KE, LR, LS, MW, MZ, NA, RW, SD, SL, ST, SZ, TZ, UG, ZM, ZW), Eurasian (AM, AZ, BY, KG, KZ, RU, TJ, TM), European (AL, AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, NO, PL, PT, RO, RS, SE, SI, SK, SM, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, GW, KM, ML, MR, NE, SN, TD, TG). Published: — with international search report (Art. 21(3))